Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0bebcd3d-c481-3089-8387-525bf89dc2da.roa
File:                     0bebcd3d-c481-3089-8387-525bf89dc2da.roa (raw, json)
Hash identifier:          Pc+43eOf7T3Z/uLaCbkzApTux9Mxtohf7m/FrrGeJS0=
Subject key identifier:   FF:4F:5D:8D:6D:8E:B7:74:DE:EF:99:4B:86:53:8B:CE:51:FB:DC:4F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A093AA9EC0A53820D56DC3500
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0bebcd3d-c481-3089-8387-525bf89dc2da.roa
Signing time:             Sat 31 May 2025 13:01:03 +0000
ROA not before:           Sat 31 May 2025 13:01:03 +0000
ROA not after:            Fri 29 Aug 2025 13:01:03 +0000
asID:                     396589
IP address blocks:        2001:500:121::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:09:3a:a9:ec:0a:53:82:0d:56:dc:35:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 31 13:01:03 2025 GMT
            Not After : Aug 29 13:01:03 2025 GMT
        Subject: CN=fb215691-8298-495b-8317-3ae11c9fc7e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:24:b3:92:45:bd:4f:d2:1a:63:6b:7d:0c:61:
                    11:53:b2:20:97:eb:50:82:9a:66:1a:64:44:cf:af:
                    f8:96:72:1c:00:9a:32:32:84:28:4a:cd:ac:31:ca:
                    0c:9b:9a:5c:35:62:8c:89:e5:50:bc:99:d8:0a:e3:
                    fc:32:28:00:c4:6f:2e:0c:2d:6c:62:1f:4f:dd:3d:
                    5d:67:3e:31:77:5e:a5:4d:3e:2b:bf:35:9c:1a:e8:
                    30:ab:5c:51:d8:da:9a:a8:ab:94:b6:eb:16:6a:3b:
                    ee:a9:ca:8b:05:10:4e:32:71:f0:ad:25:27:40:d8:
                    a8:84:6a:72:7e:ff:f3:7f:68:b7:85:ce:ae:a9:35:
                    b6:22:c5:62:55:f8:38:a3:2a:30:f7:cf:fb:ab:a8:
                    0f:19:66:37:57:fd:57:ce:1a:6c:cc:5e:a3:79:1d:
                    ee:b8:aa:95:27:1a:cc:7f:1c:35:23:4d:ed:8a:f8:
                    95:d9:82:2d:aa:78:2c:4b:29:6a:cc:2b:d1:2d:8c:
                    93:01:d6:3f:b9:af:b7:2c:36:1c:a2:4c:94:e1:ae:
                    45:f7:d7:4f:06:f0:24:bb:85:05:2b:b0:bc:e5:55:
                    e1:4d:2d:82:8e:4b:90:62:1d:6c:a1:8c:0b:9c:f8:
                    34:39:bc:84:32:2d:86:47:db:e7:28:07:1e:e5:6f:
                    5b:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:4F:5D:8D:6D:8E:B7:74:DE:EF:99:4B:86:53:8B:CE:51:FB:DC:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0bebcd3d-c481-3089-8387-525bf89dc2da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:121:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:a3:8f:03:34:73:35:5b:f3:a5:80:f0:27:2c:c7:97:cd:4c:
         9a:3f:0f:da:fc:79:4d:e3:6b:43:67:9c:f4:ad:3e:c9:32:f1:
         fe:a1:33:06:13:cc:e6:85:18:e3:c6:af:04:2b:f1:4e:89:42:
         25:66:02:ad:63:25:d0:36:6b:97:d3:41:8c:ec:33:52:5f:e5:
         22:b3:a2:03:8a:be:dd:d1:8b:c3:f8:21:53:91:2f:90:3a:f6:
         16:85:1e:1f:6d:bf:3d:ec:f5:92:e0:e0:fe:aa:59:38:bf:f1:
         7b:7e:39:7e:0a:a9:0c:fc:2d:eb:3b:af:bb:1b:a3:d6:b3:5e:
         85:44:a9:19:b9:12:67:51:49:6f:cc:5a:eb:df:5f:6a:9c:de:
         5b:9e:a1:e9:a7:3e:da:c1:1a:60:9a:3b:0d:1a:2d:5c:81:51:
         1b:52:f7:7f:c2:7c:d9:bf:1d:9b:07:59:d9:13:44:75:49:ed:
         59:f7:06:47:ff:63:14:4e:38:c4:0b:5f:ba:68:96:e1:48:98:
         27:70:af:c0:ce:b9:76:df:4a:6a:ac:dc:0d:0c:3a:77:75:5f:
         d2:94:fd:81:28:80:15:b2:cd:0d:17:28:af:7e:d8:46:79:99:
         74:52:82:3c:7c:8a:07:3e:a5:51:71:ba:68:ea:67:bb:4a:2c:
         48:4e:6d:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 06:07:16 2025 by rpki-client